chore(deps): Bump @sveltejs/kit devDependency to 2.49.5

[Lms24]

Bumps our dev dependency sveltekit version to the latest version in light of GHSA-j2f3-wq62-6q46.

To be clear, this package is only used a dev dependency, so it wasn't shipped in our SvelteKit SDK NPM package.

More details: https://svelte.dev/blog/cves-affecting-the-svelte-ecosystem

Update: After deduping the lock file, this also now fixes the same affected dep being used in a @sentry/nuxt dev dependency because nuxt specified devalue@^5.0.0. (Nuxt folks are also bumping the dependency officially shortly, thouth I assume this will only affect Nuxt@4 🤔, nuxt/nuxt#34089)

Closes #18849 (added automatically)

[Lms24]

devalue was also affected by 2 other CVEs but the latest kit version already bumps to the fixed version

[github-actions]

node-overhead report 🧳

Note: This is a synthetic benchmark with a minimal express app and does not necessarily reflect the real-world performance impact in an application.

Scenario	Requests/s	% of Baseline	Prev. Requests/s	Change %
GET Baseline	8,949	-	9,517	-6%
GET With Sentry	1,769	20%	1,769	-
GET With Sentry (error only)	6,052	68%	6,054	-0%
POST Baseline	1,186	-	1,195	-1%
POST With Sentry	600	51%	579	+4%
POST With Sentry (error only)	1,033	87%	1,068	-3%
MYSQL Baseline	3,311	-	3,359	-1%
MYSQL With Sentry	474	14%	450	+5%
MYSQL With Sentry (error only)	2,706	82%	2,718	-0%

View base workflow run